IntelTriage

IntelTriage is a web app (with optional Slack/Teams integration) that helps security teams convert threat-intel overload into a prioritized, explainable queue of actions. It ingests common sources (MISP, STIX/TAXII, vendor feeds, GitHub/Telegram paste links, and internal IOCs), deduplicates indicators, and scores them against your environment context (asset criticality, exposed services, geo, industry, recent alerts). An AI layer summarizes why an IOC matters, maps it to MITRE ATT&CK, and suggests concrete next steps (block, hunt query, ticket, or ignore) with confidence and citations. The product is intentionally narrow: triage and decision support, not a full SIEM/SOAR replacement. Expect hard constraints: you’ll need good data hygiene and some integration work to get high signal. The payoff is fewer wasted analyst hours and faster response on truly relevant threats.